doug
Reputation: 2111
Why does "admin' #" work as a sql injection attack on MySql but "admin' --" doesn't?
Isn't -- a valid MySql comment also?
Upvotes: 3
Views: 646
Answers (1)
PiTheNumber
Reputation: 23542
Try admin' -- . with a space and something to make your browser keep the space.
See also the manual.
Upvotes: 7
Related Questions
- Which characters are actually capable of causing SQL injection in MySQL?
- what's the meaning of 'admin' OR 1=1 -- '
- Why does this SQL injection succeed even though the SQL statement produces a syntax error?
- sql injection. What is the difference between " 'OR 1=1 #" and " ' OR 1=1 -- "?
- This SQL injection does not work, why?
- MySql Comment Syntax - What's the difference between "#" and "-- "
- SQL query not subjected to injection, but
- Why is this SQL code insecure?
- How can this kind of SQL injection work even though there is not security consideration at all?
- How is this MySQL query vulnerable to SQL injection?